Skip to content
September 16, 2026
  • Bluesky
  • Facebook
  • Linkedin
  • Mastodon
  • RSS
  • Twitter
  • Youtube

Daily CyberSecurity

Zero-hour alerts. Unmatched analysis.

Primary Menu
  • Home
  • CVE Data
    • CVE Watchtower
    • Top Exploited CVEs
    • CVE Stats by Vendor
    • Q2 2026 Report
    • CVE Alerts
    • CVE Alert Settings
    • Pricing
  • Cyber Criminals
  • Data Leak
  • Free Tools
    • CVSS 3.1 Calculator
    • Certificate Viewer
    • DNS Lookup
    • Encoder & Hash Generator
    • IP / Subnet Calculator
    • Whois Lookup
  • Linux
  • Malware
  • Vulnerability
  • Submit Press Release
  • Weekly Recap
Light/Dark Button
  • Home
  • News
  • Data Leak
  • Hackers sell US military drone documents for $150
  • Data Leak

Hackers sell US military drone documents for $150

Do Son July 13, 2018 2 minutes read
US military drone documents
Add Daily CyberSecurity as a preferred source on Google
The MQ-9 drone (codename: Reaper) is a highly lethal new crewless combat aircraft capable of performing intelligence, surveillance, and reconnaissance (ISR) missions. In March 2007, the US Air Force formed the Reaper UAV Attack Squadron, the 42nd Air Attack Aircraft Squadron at Crich Air Force Base, Nevada, and set up a particular Reaper UAV Working Group. Research tactics, train crews, and conduct practice drills.
According to several media reports, the threat intelligence company Recorded Future recently discovered that a group of hackers is selling sensitive military documents in the dark market trading market, including the maintenance manual and pilot list of the MQ-9 Reaper drone.
It is also worth mentioning that the military documents being sold are not limited to the information related to the MQ-9 Reaper drone. Other materials include the description of improvised explosive devices. Various training manuals for the bombs, M1 Abrams tank operation manual, crew training and survival manual, and documentation detailing tank tactics.
The US-based Recorded Future said that for these online sales files, hackers are relatively inexpensive, ranging from $150 to $200.
Image: recordedfuture
Recorded Future also said it had contacted hackers online. According to hackers, they obtained these files by exploiting vulnerabilities that publicly disclosed in the Netgear router in 2016.
Hackers use the Shodan search engine to discover those vulnerable Netgear routers online and then exploit them to exploit them. Hackers say these routers are still using known default FTP passwords, which makes it easy to log in, and some of them are in military facilities.
Based on some information posted by hackers on the Internet and conversations with them, Recorded Future was finally able to determine that the attacked military Netgear router located at Crich Air Force Base, Nevada. After obtaining some necessary access rights through the router, he successfully got the maintenance manual and pilot list of the MQ-9 Reaper drone.
The MQ-9 Reaper is considered one of the most advanced drones in the world and is widely used by the US Air Force, Navy, Central Intelligence Agency, Customs and Border Protection, NASA, and other countries. use.
For other military documents, the hackers did not disclose where they specifically stole, but Recorded Future, based on some information they posted, believed that the source of the materials was likely to be the Pentagon or some US Army officials.

Related coverage

  • Former NSA contractor plead guilty due to stealing 50TB confidential data plans
  • Clearview AI Faces Record €30.5 Million Fine for Privacy Breach
  • Roku Experiences Second Data Breach Incident Affecting Over Half a Million Accounts
Track all actively exploited CVEs →

Support Our Threat Intelligence

Find our threat intelligence and malware analysis helpful? Support our work today and unlock a 100% ad-free reading experience!

Buy Me a Coffee Logo Buy Me a Coffee
Select your plan
Free Pro Team

Hover over a plan to see its benefits.

Stay Ahead of the Threat

Join security professionals receiving zero-hour CVE alerts, PoC updates, and threat analysis directly to their inbox.

No spam. One actionable email per week. Unsubscribe anytime.

SHARE
Share on FacebookShare on XShare on LinkedInShare on TelegramShare on BlueskyShare on Mastodon
Written by
@DdoS · Security Researcher

Do Son

Do Son is the Founder and Editor of SecurityOnline.info. Working in cybersecurity since 2013, he reports on vulnerabilities, malware, and emerging threats, providing timely analysis to help organizations and individuals stay ahead of evolving risks.

Tags: US military drone documents

Search

Translation

CVE ALERTS
📧

Email Delivery
Get threat intel straight to your inbox.

♾️

Unlimited Vendors
Track every technology in your stack.

🚨

All New CVE Alerts
Be the first to know about new flaws.

⚙️

Custom EPSS Threshold
Filter noise, focus on real risks.

💬

Slack & Teams Webhook
Integrate directly into your SecOps.

🚫

100% Ad-Free
Enjoy an uninterrupted reading experience.

$7/mo
Subscribe Now

🚨 Active Exploits in the Wild

  • CVE-2026-58704
    In Cellular Modem, there is a possible permission bypass due to a logic error in the code. This...
    Admin intel📅 Updated: Sep 16, 2026
  • CVE-2026-87886
    Exploitation of this vulnerability has been detected in the wild in limited, targeted attacks against Acronis Backup plugin...
    Admin intel📅 Updated: Sep 16, 2026
  • CVE-2026-87827CVSS 10.0
    Certain KGUARD DVR devices running vulnerable firmware expose a system command execution service on all network interfaces without...
    Admin intel📅 Updated: Sep 15, 2026
  • CVE-2026-78006CVSS 9.8
    The The Events Calendar plugin for WordPress is vulnerable to Remote Code Execution in all versions up to,...
    Admin intel📅 Updated: Sep 15, 2026
  • CVE-2026-39364
    Vite is a frontend tooling framework for JavaScript. From 7.1.0 to before 7.3.2 and 8.0.5, on the Vite...
    Admin intel📅 Updated: Sep 15, 2026
  • CVE-2026-27540CVSS 9.0
    Unrestricted Upload of File with Dangerous Type vulnerability in Rymera Web Co Pty Ltd. Woocommerce Wholesale Lead Capture...
    Admin intel📅 Updated: Sep 15, 2026
  • CVE-2026-76461CVSS 9.8
    A vulnerability in the email parsing of Cisco AsyncOS Software for Cisco Secure Email Gateway could allow an...
    CISA KEV📅 Added to KEV: Sep 14, 2026
  • CVE-2026-51990
    A critical remote code execution vulnerability in Sogou Input Method, one of the most widely used Chinese-language input...
    Admin intel📅 Updated: Sep 12, 2026
Powered by CVE Watchtower

🔴 Live Critical Threats

  • CVE-2026-73447CVSS 9.1
    A privileged attacker can exploit certain operation to execute arbitrary commands with...
  • CVE-2026-12793CVSS 9.8
    The JetFormBuilder — Dynamic Blocks Form Builder plugin for WordPress is vulnerable...
  • CVE-2026-14349CVSS 9.8
    The TrueBooker – Appointment Booking and Scheduler System plugin for WordPress is...
  • CVE-2026-73807CVSS 9.8
    The mySCADA myPRO Manager command API does not properly enforce authentication for...
  • CVE-2026-81855CVSS 9.1
    A hardcoded cryptographic client authentication key vulnerability exists in the robot testing...
  • CVE-2026-78225CVSS 9.0
    A hardcoded cryptographic server key vulnerability exists in the deployer-ng Update Controller...
  • CVE-2026-61560CVSS 9.8
    `@zereight/mcp-gitlab` is a Model Context Protocol server for GitLab. Prior to version...
  • CVE-2026-73437CVSS 9.6
    On affected platforms running Arista EOS with Dynamic Host Configuration Protocol (DHCP)...
  • CVE-2026-68491CVSS 9.4
    An insufficient check allowed for the overwrite of arbitrary files via a...
  • CVE-2026-61559CVSS 9.6
    `@zereight/mcp-gitlab` is a Model Context Protocol server for GitLab. Starting in version...
Powered by CVE WATCHTOWER

Daily CyberSecurity

  • About SecurityOnline.info
  • Advertise with us
  • Announcement
  • Contact
  • Contributor Register
  • Login
  • Disclaimer
  • DCMA
  • Privacy Policy
  • About SecurityOnline.info
  • Advertise on SecurityOnline.info
  • Contact Us

When you purchase through links on our site, we may earn an affiliate commission. Here’s how it works

  • CVE Watchtower
  • CVE Statistics by Vendor 2026
  • Q2 2026 Report
  • Top Exploited CVEs
  • Bluesky
  • Facebook
  • Linkedin
  • Mastodon
  • RSS
  • Twitter
  • Youtube
© 2017 - 2026 Daily CyberSecurity. All Rights Reserved.